Release Notes

QualityChecks Release Notes - v1.7.3

Release Status

Version 1.7.3 patches a transitive dependency vulnerability with no functional changes to the application.

This release includes:

• Patched a denial-of-service vulnerability in the nanoid dependency.

Summary

QualityChecks v1.7.3 pins the nanoid package (a transitive dependency of stylelint) to a patched version to resolve a known infinite-loop vulnerability.

Included in v1.7.3

Security

• Pinned nanoid to 3.3.18 via a package override, fixing an infinite loop in customAlphabet/customRandom that could hang on a size of 0.

---